Skip to main content

← Back to glossary

Term · 11. Risk & Compliance

GLBA (Gramm-Leach-Bliley Act) GLBA

Law Source: GLBA
Personal Data PAM Standards GLBA

Definition

US federal law (1999) requiring financial institutions to safeguard customer information and disclose information-sharing practices. The Safeguards Rule (updated 2023) mandates a written information security program with access controls, encryption, MFA for non-public information access, and incident response procedures. The Privacy Rule governs how financial institutions share customer data with affiliates and non-affiliated third parties.

Synonyms
  • Financial Services Modernization Act
Application
Affects banks, credit unions, securities firms, insurance companies, and any business significantly engaged in financial activities. IDM/IAM impact: MFA mandatory for access to customer NPI, role-based access controls (RBAC), privileged access management (PAM) for administrative accounts, regular access reviews.
Sources

Related terms

← Back to glossary  ·  Open in main list